Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/R4qnMjAB1y0-qURlMRwMlH4qi30.roa
File: R4qnMjAB1y0-qURlMRwMlH4qi30.roa (raw, json)
Hash identifier: 6zThEnOAODKS7nl8LtdMg7y0Zv2+SP6wMBq9O+rn3kg=
Subject key identifier: 47:8A:A7:32:30:01:D7:2D:3E:A9:44:65:31:1C:0C:94:7E:2A:8B:7D
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 018B46F77CEE12A91F56E5F3B55321543DDC
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/R4qnMjAB1y0-qURlMRwMlH4qi30.roa
Signing time: Thu 19 Oct 2023 08:05:06 +0000
ROA not before: Thu 19 Oct 2023 08:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 84.20.32.0/21 maxlen: 21
84.20.32.0/20 maxlen: 20
84.74.0.0/15 maxlen: 15
84.20.40.0/21 maxlen: 21
84.20.48.0/22 maxlen: 22
84.20.48.0/21 maxlen: 21
217.168.32.0/19 maxlen: 19
217.168.32.0/20 maxlen: 20
217.168.48.0/20 maxlen: 20
46.140.0.0/17 maxlen: 17
46.140.0.0/16 maxlen: 16
62.2.0.0/17 maxlen: 17
62.2.0.0/16 maxlen: 16
194.29.0.0/19 maxlen: 19
194.29.0.0/20 maxlen: 20
46.140.128.0/17 maxlen: 17
46.127.0.0/16 maxlen: 16
80.218.0.0/16 maxlen: 16
80.218.0.0/15 maxlen: 15
62.2.128.0/17 maxlen: 17
194.29.16.0/20 maxlen: 20
77.56.0.0/15 maxlen: 15
178.83.0.0/16 maxlen: 16
77.56.0.0/14 maxlen: 14
81.7.224.0/20 maxlen: 20
81.7.224.0/19 maxlen: 19
178.82.0.0/16 maxlen: 16
178.82.0.0/15 maxlen: 15
81.7.240.0/20 maxlen: 20
213.193.64.0/19 maxlen: 19
213.193.64.0/18 maxlen: 18
84.72.0.0/15 maxlen: 15
213.193.96.0/19 maxlen: 19
84.72.0.0/14 maxlen: 14
46.126.0.0/16 maxlen: 16
46.126.0.0/15 maxlen: 15
217.162.0.0/17 maxlen: 17
217.162.0.0/16 maxlen: 16
31.10.128.0/18 maxlen: 18
31.10.128.0/17 maxlen: 17
84.20.52.0/22 maxlen: 22
80.219.0.0/16 maxlen: 16
195.202.192.0/19 maxlen: 19
195.202.192.0/18 maxlen: 18
31.10.192.0/18 maxlen: 18
195.202.224.0/19 maxlen: 19
77.58.0.0/15 maxlen: 15
217.162.128.0/17 maxlen: 17
212.47.160.0/20 maxlen: 20
212.47.160.0/19 maxlen: 19
212.47.176.0/20 maxlen: 20
2a02:aa00::/27 maxlen: 27
2a02:aa00::/28 maxlen: 28
2a00:e2c0::/33 maxlen: 33
2a00:e2c0:8000::/33 maxlen: 33
2a00:e2c0::/32 maxlen: 32
2a02:aa10::/28 maxlen: 28
Validation: Failed, certificate revoked on Thu 02 Nov 2023 14:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:f7:7c:ee:12:a9:1f:56:e5:f3:b5:53:21:54:3d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Oct 19 08:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=478aa7323001d72d3ea94465311c0c947e2a8b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:47:a0:f1:e8:b3:bc:0e:e8:ab:ea:c0:74:
c6:09:ca:99:1d:5e:20:c1:9d:8e:e7:2b:13:3c:24:
08:c9:6b:f5:6b:da:a0:e6:ba:e7:1c:c9:0c:64:d9:
17:8e:92:3f:6b:c3:0b:87:93:db:ac:f8:32:d8:e6:
18:77:71:33:fd:b5:3f:4c:0a:3b:26:20:46:bb:6d:
2a:82:1b:da:fd:ed:9a:53:39:6b:f0:35:75:7d:11:
fc:6e:de:d9:f2:03:5d:4c:bb:2c:a9:84:b0:1f:59:
62:e0:f5:01:bc:af:58:d8:b3:34:5b:ba:fd:5e:bc:
40:05:24:19:07:9c:51:c0:36:0c:fd:1c:5d:33:b5:
fb:98:49:55:77:fc:90:09:f5:ae:b0:a2:f3:a2:13:
23:89:30:d6:f3:0f:1c:a6:9a:b4:81:61:a6:80:2c:
7c:d1:83:ee:4b:b2:69:69:79:d0:a7:12:f7:9c:00:
e5:16:db:1b:0f:06:c4:4f:3b:87:d5:14:d8:10:43:
d5:c8:b1:61:8d:d8:33:35:bd:11:98:ee:db:ea:d2:
cd:68:ed:6a:19:31:9e:d7:bc:ab:3d:ee:14:2c:d1:
85:30:b0:32:2f:07:54:6e:3b:ab:27:bc:e6:24:f7:
00:54:2d:4b:a7:14:8d:6e:a8:bc:b0:e0:87:25:22:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8A:A7:32:30:01:D7:2D:3E:A9:44:65:31:1C:0C:94:7E:2A:8B:7D
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/R4qnMjAB1y0-qURlMRwMlH4qi30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.128.0/17
46.126.0.0/15
46.140.0.0/16
62.2.0.0/16
77.56.0.0/14
80.218.0.0/15
81.7.224.0/19
84.20.32.0-84.20.55.255
84.72.0.0/14
178.82.0.0/15
194.29.0.0/19
195.202.192.0/18
212.47.160.0/19
213.193.64.0/18
217.162.0.0/16
217.168.32.0/19
IPv6:
2a00:e2c0::/32
2a02:aa00::/27
Signature Algorithm: sha256WithRSAEncryption
19:e9:81:e9:b7:cd:7a:91:8f:4e:c4:91:47:0c:54:24:05:fe:
ba:cd:a8:e7:23:bf:dd:fc:20:0e:e2:70:4a:48:63:17:ef:89:
71:29:cd:ef:06:98:b7:34:af:cf:12:b8:7b:39:33:f6:09:e4:
1f:34:2d:40:ae:62:6a:9c:e1:0b:79:6f:81:e2:d5:a7:4e:0d:
4a:6d:97:e8:0e:25:5a:70:ff:dc:5d:c4:96:6f:b6:e3:b1:be:
61:2d:02:04:f1:2a:17:39:05:e6:f3:4c:f2:19:0b:63:85:b3:
b1:3b:79:d8:03:74:33:19:dd:16:74:16:96:92:45:f1:81:61:
d6:b2:13:20:73:8f:dc:ee:a6:3c:7a:5b:06:8f:4e:2c:4e:4d:
13:06:f7:35:1b:37:12:10:bb:36:93:82:76:cb:f4:fd:c6:46:
af:c3:a4:79:08:a5:f1:fd:5a:c8:31:e3:fc:c8:69:e1:5a:79:
35:90:b5:0e:4a:68:35:8e:84:2b:1a:fa:ae:fd:56:f6:b9:e7:
33:a7:ab:4b:58:11:d4:90:12:ab:9f:1a:22:90:9b:9b:aa:8e:
6b:d9:a7:09:8b:8a:05:0e:42:f9:3e:0a:4a:fa:75:7a:7b:95:
ad:83:ef:e8:71:2a:fa:a9:56:ec:35:34:3a:11:30:ad:cc:98:
c9:e0:cf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:19 2024 by rpki-client on console-ams.rpki-client.org